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(U//FOUO) Kilos Dark Web Marketplace Search Tool 
(U)Scope 

(U//FOUO) This bulletin was created by the Central Florida Intelligence Exchange (CFIX) to inform partners of a 
new tool being used to search multiple marketplaces on the Dark Web simultaneously. The CFIX bases some of 
its analysis in this bulletin from open source reporting which includes internet and SMS postings with varying 
degrees of reliability. This information is intended to support local, state and federal government agencies 
along with other entities in developing/prioritizing protective support measures relating to an existing or 
emerging cyber threat to homeland security. 


(U) Overview 


(U) Kilos is a relatively new Dark Web search tool that is gaining popularity amongst cyber-criminals and 
researchers alike. Kilos was created in late 2019 and is believed to have been modeled after, or evolved from, 
the now non-operational Dark Web search tool named 'Grams'. Prior to being taken down by site 
administrators in 2017, Grams was known for scraping information from popular Dark Web marketplaces, such 
as Wall St, AlphaBay, Valhalla, and Dream Market 1 . The information was then indexed and made searchable, 
thus speeding up the process of locating illegal goods or services. 
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HANDLING NOTICE: This information is the property of the CFIX and may be distributed to federal, state, local, tribal, and 
territorial counterterrorism and law enforcement officials and private sector security partners. This document contains senstive information 
FOR OFFICIAL USE ONLY that cannot be released to the public, the media, or other personnel who do not have a valid "need 
-to-know" without prior CFIX approval. 
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CFIX OPEN SOURCE SPOTLIGHT 


(U) Following the voluntary removal of Grams from the Dark Web, marketplace users began to look for a new 
tool to aid in facilitating searches. Because of the lack of useful search tools for Dark Web marketplaces, when 
Kilos was created in November 2019, it quickly became an extremely popular Dark Web site. While Kilos is not 
the only Dark Web search tool available, it is touted as the premier search tool due to it's enhanced search 
tools and filtering techniques. Some of these updated search functions and privacy practices include employing 
CAPTCHA during searches, the ability to bid on listings directly from the tool, and a live chat feature that allows 
users to troubleshoot problems or submit issues directly to the administrators of Kilos. 

(U) Outlook and Implications 

(U//FOUO) While this tool may lead to an easier process for cyber criminals when attempting to locate illicit 
products on the Dark Web, some of the research that is behind this tool could also be utilized for increasing 
security on other parts of the internet. For instance, one of Kilos' enhanced security processes for performing 
searches includes users answering a CAPTCHA in order to proceed. A CAPTCHA is a program that "protects 
websites against bots by generating and grading tests that humans can pass but current computer programs 
cannot. 2 " The new type of CAPTCHA that Kilos requires is one where users must classify reviews from various 
marketplaces in order to access their search results. And according to the Kilos administrators, this is "harder 
to automate, both for machines and for CAPTCHA cracking APIs" than typical distorted text or similar images, 
thus making their "human vs. bot" check more secure. This updated CAPTCHA process could lead to enhanced 
security for government websites, financial institutions, or other protected locations online. 
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(U//FOUO) According to researchers at Digital Shadows, as of 5 March 2020- Kilos had indexed seven 
marketplaces and six forums, leading to hundreds of thousands of posts, listings, vendors, etc 3 . And from this 
massive indexed database, the administrators behind Kilos are able to provide users an expedited experience 
to search many areas of the Dark Web simultaneously. It is important to note that due to the multi-node 
encryption and the fragmented nature of the Dark Web, no search tool will ever be able to access or index all 
locations. Despite this, Kilos has the potential to be a very useful tool for cybercriminals when conducting 
transactions on Dark Web marketplaces. 

(U) Reporting Notice 

(U) The Central Florida Intelligence Exchange is providing this information for situational awareness. For 
additional information on this product, or to report suspicious activity, please contact the CFIX at (407) 858- 
3950 or CFIX-Cvber(a)ocfl.net . 

(U) Tracked by: HSEC-1.1, HSEC-1.8, HSEC-8.8, HSEC-8.8.3, CFIX-10.5 
(U) Sources 

1 i 

(U) https://www.hackread.com/dark-web-search-engine-kilos-find-hidden-marketplaces/ 

(U) http://www.captcha.net/ 

(U) https://www.digitalshadows.com/blog-and-research/dark-web-search-engine-kilos/ 
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